mirror of
https://github.com/ilri/dspace-statistics-api.git
synced 2024-11-22 06:15:02 +01:00
dspace_statistics_api/app.py: Use parameterized SQL queries
This is a better way to run SQL queries because psycopg2 takes care of the quoting for us.
This commit is contained in:
parent
60e6ea57b1
commit
9e7dd28156
@ -29,9 +29,8 @@ class AllItemsResource:
|
||||
|
||||
# get statistics and use limit and offset to page through results
|
||||
cursor.execute(
|
||||
"SELECT id, views, downloads FROM items LIMIT {} OFFSET {}".format(
|
||||
limit, offset
|
||||
)
|
||||
"SELECT id, views, downloads FROM items LIMIT %s OFFSET %s",
|
||||
[limit, offset],
|
||||
)
|
||||
|
||||
# create a list to hold dicts of item stats
|
||||
|
Loading…
Reference in New Issue
Block a user